CVE-2024-31994

CVE-2024-31994 affects Mealie, a self-hosted recipe manager, allowing an attacker to trigger a denial-of-service (DoS) condition by pointing an image request to an arbitrarily large file. Mealie attempts to retrieve the entire file, potentially leading to out-of-memory (OOM) errors and container crashes, or disk exhaustion. With a CVSS score of 6.5 (Medium), this vulnerability has a local attack vector and low attack complexity, primarily impacting availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.